Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GVc7IITN9G7hzNKC36O49rfqcmw.cer
File:                     GVc7IITN9G7hzNKC36O49rfqcmw.cer (raw, json)
Hash identifier:          qtZv62es3kvpBPHluIyoR5g4IE/iCGNxH4omdbgwWkU=
Subject key identifier:   19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019427B63349DDB1D57A565D990567ABA73A
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 02 Jan 2025 15:50:39 +0000
Certificate not after:    Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources:    AS: 205786
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:27:b6:33:49:dd:b1:d5:7a:56:5d:99:05:67:ab:a7:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  2 15:50:39 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=19573b2084cdf46ee1ccd282dfa3b8f6b7ea726c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:67:86:88:e4:1b:12:06:a7:9e:9f:00:ca:9a:
                    0a:8e:5d:f4:32:75:9f:ed:a0:80:c0:a7:1d:3c:7d:
                    be:be:2c:a3:2f:9a:d3:22:1c:ba:64:a4:fa:ae:18:
                    54:e9:83:5a:4a:06:35:84:52:ad:ed:ad:17:1a:b4:
                    e7:cb:6c:9a:07:4e:37:db:75:65:57:e0:a1:89:15:
                    c6:89:44:af:b1:2d:b2:b1:31:57:1d:c6:84:cc:2f:
                    4d:0e:89:3c:34:02:de:9d:a6:df:c7:77:65:2f:06:
                    41:58:38:4d:b9:a4:1c:6e:72:13:dd:a6:29:3d:a0:
                    9a:7f:72:4e:d8:5c:f8:9a:5e:fc:1e:93:6d:3b:43:
                    1a:c1:ea:07:41:1a:8c:64:c7:8a:fa:e3:86:1e:bf:
                    8a:b2:0f:3f:92:30:b7:b3:33:47:67:3e:21:d4:1c:
                    6d:c8:ea:35:97:28:a6:dd:6a:ca:9f:bf:51:d3:b6:
                    6e:24:04:f3:bf:fc:ca:17:4f:a9:46:90:4d:5e:14:
                    17:6e:bf:b9:67:39:22:a8:3f:bc:38:3c:ac:b6:08:
                    cb:b5:08:8a:53:0b:f3:ec:77:7e:31:cd:66:e7:2f:
                    dd:53:39:5a:1a:ac:2b:6b:ec:59:5a:a3:5e:39:06:
                    2c:19:83:2e:00:93:72:7f:4c:58:f7:a8:1c:bb:cb:
                    3a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:57:3B:20:84:CD:F4:6E:E1:CC:D2:82:DF:A3:B8:F6:B7:EA:72:6C
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8b8542-1ca1-4f8d-8ee7-e5d0e180d8e8/1/GVc7IITN9G7hzNKC36O49rfqcmw.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  205786

    Signature Algorithm: sha256WithRSAEncryption
         98:ef:55:85:3c:00:22:a4:b7:dc:34:5a:1d:7f:85:bd:7d:2f:
         31:14:55:4d:5b:ab:bc:89:79:45:c8:96:86:45:60:b0:f5:a4:
         04:aa:81:86:58:3d:7d:af:e1:d0:83:dd:7f:b2:7f:84:07:ef:
         3c:72:23:ba:71:ed:79:95:40:40:75:f9:e9:14:40:c6:84:86:
         6a:ac:67:c0:5a:9f:b0:81:b4:5b:18:27:41:2e:9a:3b:66:aa:
         64:64:54:d9:95:84:22:73:26:27:3b:a6:17:68:3e:64:f3:d6:
         1e:40:70:bf:5c:c7:27:d1:cf:a9:01:d5:ac:e0:a2:db:60:d3:
         37:85:ad:5d:79:11:1c:a9:81:9b:45:01:bc:d3:a2:19:00:bf:
         7a:aa:13:c9:39:89:87:98:7a:cd:df:9c:55:0e:8e:ab:43:ad:
         97:e1:3a:69:ae:97:a2:b3:ce:9d:20:a8:8f:74:1d:36:07:61:
         5c:b6:06:11:b7:46:23:8d:1b:ba:70:a3:4f:2c:62:19:2d:86:
         c2:02:1b:3f:e2:96:4a:c8:27:25:80:de:bf:a1:be:8a:b4:dd:
         53:27:98:53:b1:a6:05:6f:85:16:07:89:f5:1d:29:ef:95:49:
         6d:b7:97:42:10:0d:71:db:b3:98:ab:37:df:af:0c:f3:ee:a7:
         fa:14:a8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:18:23 2025 by rpki-client